Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
File: HSXQyIRbeYhsGZNFuJD16KzVFtg.mft (raw, json)
Hash identifier: TYhTfQDo97lNABXURft8TwIfLqKqmZQgXXhBlsd4QcU=
Subject key identifier: 3A:60:F6:55:75:51:9E:B1:33:07:6B:34:3D:9D:B9:1F:F6:6E:64:52
Authority key identifier: 1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
Certificate issuer: /CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Certificate serial: 01901E5924945F3613787B3914B644321B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
Manifest number: 11C0
Signing time: Sun 16 Jun 2024 00:01:16 +0000
Manifest this update: Sun 16 Jun 2024 00:01:16 +0000
Manifest next update: Mon 17 Jun 2024 00:01:16 +0000
Files and hashes: 1: HSXQyIRbeYhsGZNFuJD16KzVFtg.crl (hash: xZFTDEJwDTcFOQpjZ5xTG7h9BxGlMfyCL+xiKprjm4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:59:24:94:5f:36:13:78:7b:39:14:b6:44:32:1b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Validity
Not Before: Jun 16 00:01:16 2024 GMT
Not After : Jun 17 00:01:16 2024 GMT
Subject: CN=3a60f65575519eb133076b343d9db91ff66e6452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:76:15:b5:4b:8a:a7:b8:26:e2:23:79:9a:
df:19:01:3e:be:65:11:e3:6a:bc:24:c0:e3:2e:75:
4e:54:b4:6b:c4:60:84:b8:0a:68:00:00:34:e3:a1:
8a:a9:7d:ba:54:e3:c7:5f:50:26:8f:01:eb:ad:72:
71:6c:ec:ae:15:90:75:00:e9:c6:f1:ab:31:76:4e:
2c:61:e9:c5:9b:91:fd:dd:33:7d:0c:e6:b8:fc:01:
f4:2d:6b:02:cc:50:6f:5b:91:d4:9c:9a:9b:e7:cd:
d2:a3:07:72:f2:d3:8d:47:77:aa:84:07:96:b1:95:
3a:78:b7:df:3e:bb:18:32:61:43:ec:8a:f8:94:d1:
23:d8:76:61:ad:00:d8:dd:3c:df:32:50:9a:d3:93:
4d:bf:b0:5a:31:24:be:a0:60:a1:f9:a8:6e:04:14:
8f:28:57:0e:1e:35:76:8d:a2:86:63:e2:c5:de:c0:
46:81:cf:21:f6:d2:a3:ff:f2:82:63:bf:11:ad:67:
e0:1c:4f:cd:45:ea:f6:56:09:52:65:65:d3:7c:bf:
dd:4d:7f:43:03:e5:74:81:f1:37:c3:64:71:38:05:
8f:47:f1:9d:bd:22:8c:c7:1b:0b:67:81:c5:6a:44:
15:e9:ce:45:86:f3:79:13:27:f6:0f:23:fd:17:51:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:60:F6:55:75:51:9E:B1:33:07:6B:34:3D:9D:B9:1F:F6:6E:64:52
X509v3 Authority Key Identifier:
keyid:1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7b:36:ed:c5:e8:43:31:95:7a:63:22:a5:7a:d4:f8:eb:8b:
0f:2b:af:76:82:5a:78:53:a2:8c:62:ce:33:07:2e:d1:99:e5:
39:da:4e:58:53:18:f5:7b:b7:78:19:ef:48:c0:ef:25:34:97:
84:ab:38:98:21:32:26:27:05:ce:50:37:1c:e6:7a:13:1b:06:
e2:ab:c0:e9:bb:eb:ab:a0:de:e3:70:8a:48:16:a6:8b:4c:18:
c3:92:aa:5c:26:d7:69:49:38:f4:e7:77:5a:06:70:fa:22:94:
5f:73:9a:95:e3:df:6e:8e:97:66:1d:9e:68:f0:bd:12:82:07:
c4:5a:67:0f:62:09:a5:38:97:e3:1b:cf:19:02:8e:a6:aa:73:
bb:fd:05:dd:db:00:15:7d:70:6b:30:7b:32:a1:da:1a:38:4f:
9b:6b:39:e0:58:55:5b:ec:ad:22:97:58:e0:41:2a:45:1e:ca:
ed:70:19:49:79:1f:68:8e:31:09:c5:1f:75:08:18:39:fe:93:
f4:f2:16:22:ac:44:75:dc:45:32:bb:d1:05:7e:66:41:25:a4:
5a:7e:fe:8b:26:8e:75:43:1f:62:67:8e:7d:4e:f7:09:82:bf:
35:85:b5:76:b8:84:a1:55:2d:37:d0:5b:4a:bc:06:f7:ce:9c:
96:f5:86:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAeWSSUXzYTeHs5FLZEMhtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMjVkMGM4ODQ1Yjc5ODg2YzE5OTM0NWI4OTBmNWU4YWNk
NTE2ZDgwHhcNMjQwNjE2MDAwMTE2WhcNMjQwNjE3MDAwMTE2WjAzMTEwLwYDVQQD
EygzYTYwZjY1NTc1NTE5ZWIxMzMwNzZiMzQzZDlkYjkxZmY2NmU2NDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBR2FbVLiqe4JuIjeZrfGQE+vmUR
42q8JMDjLnVOVLRrxGCEuApoAAA046GKqX26VOPHX1AmjwHrrXJxbOyuFZB1AOnG
8asxdk4sYenFm5H93TN9DOa4/AH0LWsCzFBvW5HUnJqb583Sowdy8tONR3eqhAeW
sZU6eLffPrsYMmFD7Ir4lNEj2HZhrQDY3TzfMlCa05NNv7BaMSS+oGCh+ahuBBSP
KFcOHjV2jaKGY+LF3sBGgc8h9tKj//KCY78RrWfgHE/NRer2VglSZWXTfL/dTX9D
A+V0gfE3w2RxOAWPR/GdvSKMxxsLZ4HFakQV6c5FhvN5Eyf2DyP9F1EkpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpg9lV1UZ6xMwdrND2duR/2bmRSMB8GA1UdIwQY
MBaAFB0l0MiEW3mIbBmTRbiQ9eis1RbYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFNYUXlJUmJlWWhzR1pORnVKRDE2S3pWRnRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81NTc1MjQtMjk3ZC00ODQ5LWI0YmUt
YzUyZWI1NmJmYTViLzEvSFNYUXlJUmJlWWhzR1pORnVKRDE2S3pWRnRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy81NTc1MjQtMjk3ZC00ODQ5LWI0YmUtYzUyZWI1NmJmYTVi
LzEvSFNYUXlJUmJlWWhzR1pORnVKRDE2S3pWRnRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXs27cXo
QzGVemMipXrU+OuLDyuvdoJaeFOijGLOMwcu0ZnlOdpOWFMY9Xu3eBnvSMDvJTSX
hKs4mCEyJicFzlA3HOZ6ExsG4qvA6bvrq6De43CKSBami0wYw5KqXCbXaUk49Od3
WgZw+iKUX3OalePfbo6XZh2eaPC9EoIHxFpnD2IJpTiX4xvPGQKOpqpzu/0F3dsA
FX1wazB7MqHaGjhPm2s54FhVW+ytIpdY4EEqRR7K7XAZSXkfaI4xCcUfdQgYOf6T
9PIWIqxEddxFMrvRBX5mQSWkWn7+iyaOdUMfYmeOfU73CYK/NYW1driEoVUtN9Bb
SrwG986clvWGAQ==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:50:45 2024 by rpki-client on console-ams.rpki-client.org